Lambda

Security Researcher

High

Total

Medium

Solo

Total

$49.04K

Total Earnings

#230 All Time

10x

Payouts

1x

2nd Places

7x

Top 10

10x

Top 25

All

Sherlock

Jul '24

MakerDAO Endgame

6,682.42 USDC • Sherlock • Lambda

#16

Jun '24

Allora

31,547.27 USDC • 2 total findings • Sherlock • Lambda

#12

medium

Standard deviation calculation is biased

medium

Malicious peer can cause a syncing node to panic during blocksync

Oct '22

NFTPort

176.00 USDC • 1 total finding • Sherlock • Lambda

medium

Replayable signatures allowing free deploys when they should not be free

Union Finance

1,829.40 USDC • 5 total findings • Sherlock • Lambda

high

Overdue balances cannot be paid back

medium

Downcast in UToken.borrow allowing borrows that should not be allowed

medium

Comptroller.withdrawRewards: totalFrozen subtracted two times from totalStaked

medium

AssetManager.removeAdapter: Adapter not removed from withdrawSeq

medium

UserManager.cancelVouch not updating voucherIndexes / voucheeIndexes

Merit Circle

444.22 USDC • 1 total finding • Sherlock • Lambda

high

setCurvePoint: unit not updated when curve.length changes

Mycelium

109.26 USDC • 1 total finding • Sherlock • Lambda

medium

Deployment can be bricked by manually transferring small LINK amount before first deposit

Sep '22

Sherlock

2,870.26 USDC • 1 total finding • Sherlock • Lambda

medium

TrueFiStrategy: Too little withdrawn when used with AlphaBetaSplitter

Harpie

205.26 USDC • 3 total findings • Sherlock • Lambda

medium

Funds are locked up for fee-on-transfer

medium

Withdrawing payments may fail

medium

Overflow possible in logIncomingERC20

Notional

167.14 USDC • 1 total finding • Sherlock • Lambda

#12

medium

ExchangeRate age not checked

Aug '22

Sentiment

5,013.40 USDC • 9 total findings • Sherlock • Lambda

high

LEther: Flash loan can be used to manipulate borrow rate

high

ChainlinkOracle: Assumes all feeds have 8 decimals

high

ERC4626Oracle: Assumes that asset and share have same number of decimals

high

UniV2LPOracle: Decimals of pair tokens ignored

medium

StableBalancerLPOracle: Wrong calculation

medium

BalancerController: Can be misused to get non-approved tokens into the account

medium

AccountManager: Liquidations not possible when transfer fails

medium

AccountManager: address(0) used for borrowing ETH

medium

AccountManager: Fee-On-Transfer tokens not supported